Who we are
Quiet Consensus Ltd (“Quiet Consensus”, “we”, “us”) is the controller of the personal information described in this notice. We are a private limited company registered in England and Wales (company number 16906642); our registered office address and other company details are on our legal information page. We are registered with the Information Commissioner’s Office (ICO) under reference ZC145050.
For any privacy question, request or complaint, use our contact form and choose “Other” as the enquiry type. We have not appointed a Data Protection Officer.
Information we collect
When you use the contact form, you give us:
- your name, email address and message (required);
- your organisation and the type of enquiry (optional); and
- confirmation that you have read this notice.
The email we receive records when it was sent. If we then correspond by email, we also hold whatever you include in that correspondence. We need your name, email address and message to reply; without them we cannot respond to your enquiry.
When you visit the site, Cloudflare, our hosting provider, processes technical information such as your IP address, browser and device details and request data in order to deliver the site and protect it from attack. When you submit the form, your IP address is also passed to Cloudflare Turnstile to check the submission. We do not use this information to identify you, and the site does not use analytics or advertising tracking.
How and why we use information
- To receive, assess and respond to enquiries, including considering whether we can help and managing the correspondence that follows. Lawful basis: legitimate interests — responding to people who contact us and developing our business.
- To take steps you ask for before entering into a contract, such as preparing a proposal, where the contract would be with you personally. Lawful basis: contract. Where you contact us on behalf of an organisation, we rely on legitimate interests instead.
- To keep the website secure and prevent spam and abuse. Lawful basis: legitimate interests in protecting our website, our inbox and the people who use them.
- To keep business records if we go on to work together. Lawful basis: legal obligation, for example accounting and tax requirements.
The checkbox on the contact form confirms you have seen this notice; it is not a request for consent. We do not use your information for marketing, add you to a mailing list, sell it, or use it for profiling or automated decision-making.
How contact-form messages are handled
When you submit the form, your browser sends it securely to a server-side function hosted by Cloudflare. The function checks the content and the Turnstile result, then uses Cloudflare’s email sending service to deliver your message as an email to our business address. Cloudflare Email Routing forwards that address to our inbox, which is provided by Google (Gmail).
The website does not store submissions in its own database, and its logs record only non-identifying events, such as whether a message was delivered, not the content of your message or your contact details. Your message is then kept as an email in our inbox, and our service providers may keep their own operational records as described in their privacy information.
Spam protection
The contact form uses Cloudflare Turnstile to tell people apart from automated abuse. Turnstile processes limited technical information, such as your IP address, browser details and signals from your device, to perform this check. Cloudflare processes this information for us to run the check, and also uses it as an independent controller to improve Turnstile’s bot detection. See the Turnstile privacy addendum.
Service providers
We share information with these providers only so the site and our email can work:
- Cloudflare, Inc. — website hosting, security, the contact form function, Turnstile, email sending and email routing. For most of this Cloudflare acts on our behalf; for some activities, such as improving its security services, it acts as an independent controller. See Cloudflare’s privacy policy.
- Google — our email inbox (Gmail), where enquiries and correspondence are stored. See Google’s privacy policy.
We may also disclose information where the law requires it, or to professional advisers where needed to establish, exercise or defend legal claims.
International transfers
Cloudflare and Google are based in the United States and may process information there and in other countries. Both state that they participate in the UK Extension to the EU–US Data Privacy Framework, which UK law recognises as providing adequate protection, and that they use standard contractual clauses where it does not apply. Contact us if you would like more information about the safeguards that apply.
How long we keep information
- Enquiries that don’t lead to work together: we normally delete them after 12 months without further contact.
- Enquiries that lead to an engagement: we keep relevant correspondence for as long as needed for the work and to meet our business, accounting and legal obligations.
- Security and service logs: kept by our providers in line with their retention settings and policies.
We review our inbox periodically rather than deleting automatically. We may keep information longer where the law requires it, or where it is needed for a legal claim.
Cookies and browser storage
We do not use analytics or advertising cookies or similar tracking. The site stores information on your device only in these cases:
- Theme preference. If you switch between light and dark themes, your choice is saved in your browser’s local storage so the site looks the way you chose. It stays on your device and is not sent to us.
- Spam protection. On the contact page, Turnstile may store and read information on your device, solely to protect the form from abuse.
- Security. Cloudflare may set strictly necessary security cookies if it needs to protect the site from an attack.
These are either strictly necessary or used only to remember your chosen appearance, so we don’t ask for consent. You can stop the site remembering your theme here:
Your rights
You have the right to ask for access to your personal information, and to ask us to correct or erase it, or to restrict how we use it. Where it applies, you can ask us to transfer information you gave us to you or to another organisation.
Your right to object. Where we rely on legitimate interests, you can object to our use of your information at any time. We will stop unless we have compelling legitimate grounds, or need it for a legal claim.
These rights are subject to conditions and exceptions in law. To use them, send a request through our contact form. We may need to confirm your identity before acting, and we will normally respond within one month.
Complaints
If you are unhappy with how we have handled your information, please tell us through our contact form. We will acknowledge your complaint within 30 days and tell you the outcome without undue delay.
You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint. You do not have to contact us first.
Changes to this notice
We may update this notice. When we make a material change, we will update the date at the top of this page.